The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service (CLI session crash) via a crafted command string.
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000022
http://jvn.jp/en/jp/JVN65923092/index.html